What is GDPR?

Lawfulness: All information is collected and processed lawfully based on contractual requirements.

Fairness: xMatters only process data according to the documented policies and procedures. There is no undocumented collection, use or disclosure of client data that.

Transparency: We keep trust portal as a means to be transparent with our clients in terms of how our data practices are being carried. xMatters only access client data and client instances when they have been explicitly permitted to do so by the client in order to address client requests (e.g. problem ticket) and for support purposes, there is no casual data access.

Client data collected by xMatters is for specified, explicit and legitimate purposes, which depends on client’s Business and Use case. All client provided data is used for service delivery as per contracted terms and agreements to facilitate emergency communications.

xMatters has minimum data requirements that is a constituent receiving emergency communications: First Name, Last Name, and Email Address. Any further information provided by clients are up to the complete discretion of the client and to support their Business Case and Use Case toward the use of xMatters.

xMatters provides all clients with complete control over their own data. All clients have a Web Based User Interface (WebUI) access to xMatters SaaS for control and data entry, deletion and modification. xMatters has no control over the accuracy of client data inputted into the system.

xMatters data retention period is governed by the contractual agreement with the client.

xMatters makes sure that client personal data is processed in a manner that ensures industry-standard security of personal data. xMatters stores and processes all client data in Google Cloud Platform (GCP) datacenters and utilizes GCP’s industry leading security services. xMatters protects client data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

xMatters does not ‘share’ or ‘sell’ any data. All client provided data is used for service delivery as per contracted terms and agreements. Any data transferred to suppliers is done so as a part of xMatters service delivery. Suppliers are bound by contractual agreements to process data for xMatters only for xMatters business needs.

xMatters is responsible for Personal Information under its control and has a designated Data Protection Officer (DPO) who is accountable for xMatters compliance with this Privacy Code of Conduct. xMatters keeps a data map and uses an Access Control Process overlaid with Role Based Access Control (RBAC) for separation of duties and segregation of roles. xMatters provides specific and understandable information about our policies and practices HERE. Clients can also contact xMatters by clicking HERE.